-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The primary evidence comes from the Jira issue MDEV-32086, which is directly linked to CVE-2023-52970. The Jira issue includes a stack trace from the crash, explicitly naming 'Item_direct_view_ref::derived_field_transformer_for_where' as the point of failure. The vulnerability description also mentions this function. The MariaDB release notes confirm the fix for MDEV-32086. Although direct commit information is not available through the tools, the Jira issue provides strong evidence for the vulnerable function.
Ongoing coverage of React2Shell